CVE-2024-48112
A deserialization vulnerability in the component \controller\Index.php of Thinkphp v6.1.3 to v8.0.4 allows attackers to execute arbitrary code.
Published Updated
PatchFirst · Latest vulnerabilities
topthink/thinkphp vulnerabilities
Vulnerabilities published for topthink/thinkphp in the last 30 days: 0. Listed in the KEV catalogue: 0.
Vulnerabilities: 2
CVE-2020-20120
ThinkPHP v3.2.3 and below contains a SQL injection vulnerability which is triggered when the array is not passed to the "where" and "query" methods.
Published Updated
Check your server
Check your installed stack and versions against the current vulnerability feeds.